diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 00000000..2441d07d
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,38 @@
+name: Build
+on:
+  push:
+    branches: [naive]
+    paths-ignore: [README.md]
+  release:
+    types: [published]
+defaults:
+  run:
+    shell: bash
+jobs:
+  build_caddy_with_naive:
+    runs-on: ubuntu-22.04
+    env:
+      BUNDLE: caddy-forwardproxy-naive
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-go@v3
+        with:
+          go-version: ^1.18.1
+      - run: go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest
+      - run: ~/go/bin/xcaddy build --with github.com/caddyserver/forwardproxy@caddy2=$PWD
+      - name: Pack naiveproxy assets
+        run: |
+          mkdir ${{ env.BUNDLE }}
+          cp caddy LICENSE README.md ${{ env.BUNDLE }}
+          tar cJf ${{ env.BUNDLE }}.tar.xz ${{ env.BUNDLE }}
+          openssl sha256 ./caddy >sha256sum.txt
+          echo "SHA256SUM=$(cut -d' ' -f2 sha256sum.txt)" >>$GITHUB_ENV
+      - uses: actions/upload-artifact@v2
+        with:
+          name: ${{ env.BUNDLE }}.tar.xz caddy executable sha256 ${{ env.SHA256SUM }}
+          path: sha256sum.txt
+      - name: Upload caddy assets
+        if: ${{ github.event_name == 'release' }}
+        run: hub release edit -a ${{ env.BUNDLE }}.tar.xz -m "" "${GITHUB_REF##*/}"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/forwardproxy.go b/forwardproxy.go
index 83fec678..186a9526 100644
--- a/forwardproxy.go
+++ b/forwardproxy.go
@@ -48,6 +48,10 @@ import (
 
 func init() {
 	caddy.RegisterModule(Handler{})
+
+	// Used for generating padding lengths. Not needed to be cryptographically secure.
+	// Does not care about double seeding.
+	rand.Seed(time.Now().UnixNano())
 }
 
 // Handler implements a forward proxy.